Privacy Policy

Kuro ("Kuro", "we", "us" or "our") is an AI customer-engagement platform operated by Curocode, based in Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, share and protect personal information when you use our website, dashboard and the AI agents — in chat and by voice — that we provide to businesses.

We act in two roles. For the businesses that subscribe to Kuro (our "Customers"), we are a data controller of their account information and a data processor of the conversations their own end-users have with their AI agent. For visitors who chat or speak with an agent powered by Kuro, the business operating that agent is the controller of the conversation, and Kuro processes that data on their behalf.

Account information — when you sign up, we collect your name, business name, email address, hashed password and chosen plan.

Conversation data — the exchanges between visitors and the AI agent, including any text, emoji, and (on eligible plans) images uploaded during a chat. Where a business has enabled the voice agent, a written record of the conversation is kept in the same way, so the business can pick up where the conversation left off.

Voice — the microphone is used only while a visitor is on a call they chose to start, and only for that call. Calls are recorded, and the recording is available to the business operating the agent alongside the written record and any contact details a visitor chooses to share. The voice screen says so before a call begins.

Knowledge base content — the business information, FAQs, menus, pricing and documents you provide to train your agent.

Usage and technical data — log data such as IP address, browser type, device information, pages visited, and timestamps, collected to operate and secure the service.

• We do not ask you to enter payment card numbers, bank details or government IDs into the chat agent.
• We do not knowingly collect data from children under 16.

• To provide, operate and maintain the Kuro service and your AI agent.
• To generate AI responses to customer enquiries in real time.
• To capture and score leads, bookings and enquiries for the business.
• To send service and verification emails (for example, the email-verification code at sign-up).
• To monitor usage, prevent abuse and enforce plan limits.
• To improve reliability, security and the quality of the product.

We do not sell your personal information, and we do not use the private contents of your conversations to train third-party foundation models.

Kuro relies on trusted third-party providers to deliver the service — including AI providers to generate agent responses, speech providers to recognise and produce speech on a voice call, and infrastructure providers for hosting, data storage, email delivery, and (where enabled) messaging channels such as WhatsApp, Instagram and Facebook.

Conversation content may be transmitted to AI providers solely to generate a response. On a voice call, audio is processed by our speech provider for the length of the call so the agent can understand and reply. Each provider processes data only as needed to perform its function and under its own security and privacy commitments. We do not sell your data or use the private contents of your conversations to train third-party foundation models.

We retain account information for as long as your account is active. Conversation and lead data is retained while it is useful to the business operating the agent, and may be purged on a rolling basis. Images uploaded in chats are subject to automatic retention limits and are periodically purged.

When a business closes its account, associated data is deleted or anonymised within a reasonable period, except where we must retain it to comply with legal obligations.

We use a small number of essential cookies and browser local-storage entries — for example, to keep you signed in, remember your theme preference, and operate the chat widget. With your consent, our website also uses Google Analytics to understand how it is used, and the Meta and OpenAI advertising pixels to measure our advertising; these set cookies and share limited browsing data with Google, Meta and OpenAI, such as the pages you view and whether you sign up or request a demo. None of them load until you choose "Accept all" on the cookie banner, and choosing "Necessary only" keeps them off. They run on kuro.curocode.com only — never inside the chat widget on a business's website.

We protect your data with industry-standard measures: encryption in transit (HTTPS), hashed passwords, scoped access tokens, rate limiting, email verification and least-privilege access to production systems. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

Depending on your location, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below.

If you are an end-user who chatted with a Kuro-powered agent, please direct your request to the business that operates that agent; we will assist them as their processor.

Kuro is operated from the UAE and uses infrastructure hosted in the European Union and other regions. Where data is transferred across borders, we rely on appropriate safeguards required by applicable law.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page and, where appropriate, by notifying you directly.

If you have any questions about this Privacy Policy or how we handle your data, contact us at privacy@curocode.com.

Kuro by Curocode · Dubai, United Arab Emirates.